4289e00432dbe6fded6a23907cd61dea

General

Target

4289e00432dbe6fded6a23907cd61dea
Size

1.0MB
MD5

4289e00432dbe6fded6a23907cd61dea
SHA1

d6366137cfbbfdfd25c405a6abcb6d4f9ebfd899
SHA256

cabd2ea1926973176a5fa590bbfec2ff96db15a8af73f0432f704f3c291c2333
SHA512

e43b222a2b5c63d1bd0e7884ade7fcfed58cba0579f00dc57ce5838e8354e32b5a16f30ab0ac71ab5bccd6af34d2cc0dd0b77c97b4a982642b514611addadf0d
SSDEEP

24576:cHlXn0/wlt/QL3gUd1ZLkXBEddLduHDyiCFuXl7qP9QRaR:cH1n0ct/Q53LkGe3CIGr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4289e00432dbe6fded6a23907cd61dea

Files

4289e00432dbe6fded6a23907cd61dea
.exe windows:4 windows x86 arch:x86

ef73925b8f1a1026cca13482829a2584

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
Sleep
FreeLibrary
GlobalAlloc
CloseHandle
GetCommandLineA
GetStartupInfoA
GetVersionExA
LocalFree
lstrcpyA
GetFileSize
lstrcatA
GlobalFree
GetTickCount

msvcrt

_c_exit
_XcptFilter
wcslen
_adjust_fdiv
memmove
rand
__getmainargs
_except_handler3
__CxxFrameHandler
__set_app_type
wcschr
toupper
_exit
__p__commode
_initterm

user32

LoadIconA
EndPaint
ShowWindow
EndDialog
DialogBoxParamA
SetFocus

gdi32

GetDeviceCaps
CreateCompatibleDC
ExtTextOutA
SelectObject
CreateFontIndirectA
GetTextExtentPoint32A
PatBlt
GetBkColor
CreateSolidBrush
MoveToEx
GetObjectA
GetTextColor
SetROP2

Sections

.text
Size: 1024B - Virtual size: 981B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1018KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef73925b8f1a1026cca13482829a2584

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

Sections

.text Size: 1024B - Virtual size: 981B

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 423B

.rsrc Size: 1018KB - Virtual size: 2.8MB

.text
Size: 1024B - Virtual size: 981B

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 423B

.rsrc
Size: 1018KB - Virtual size: 2.8MB